Statička analiza pametnih ugovora na platformi Ethereum

master's thesis

• Title (english): Static analysis of Ethereum smart contracts
• Author: Blaž Bagić
• Mentor: Ante Đerek (mentor)
• Committee member: Ante Đerek (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Marin Golub (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-14, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Ovaj rad nadograđuje alat za statičku analizu pametnih ugovora, Slither, sa novim detektorom za ranjivost zvanu umetanje ispred (eng. front running). Rad opisuje provedeno istraživanje potrebno za stvaranje početne hipoteze o načinu kojim će se moći detektirati umetanje ispred. Koraci implementacije novog detektora su dani zajedno sa poglavljem o provedenim eksperimentima i njihovim rezultatima.
Implementirano rješenje ima određene mane, za koje postoji poglavlje u kojemu se diskutira o tome što se i kako može unaprijediti da bi se ostvarilo bolje rješenje.

Abstract (english)

This paper extends a static analysis framework, Slither, with a new detector that detects the front running vulnerability. It describes the research made to be able to create the hypothesis on how to detect front running. The implementation steps of the new detector are presented along with a chapter on the experiments taken and its results.
The solution created has certain flaws that are acknowledged and future steps that should be taken to create a better solution are discussed.

• Keywords: Ethereum; lanac blokova; pametni ugovor; ranjivosti; ovisnost o poretku transakcija; umetanje ispred; CFG; posredna reprezentacija
• Keywords (english): Ethereum; blockchain; smart contract; vulnerability; front running; race conditions; transaction ordering dependence; CFG; intermediate representation
• Language: english
• URN:NBN: urn:nbn:hr:168:109096
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 09:42:11